Awesome SOC
An operational handbook and knowledge base for building, running and maturing a Security Operations Center or CSIRT, covering detection engineering, threat intelligence, SOC metrics, automation and incident-response playbooks.
Awesome SOC is a curated knowledge base covering SOC and CSIRT fundamentals, mission-critical tools and sensors, SOC internals, AI use cases in security operations, SOAR, detection engineering, threat intelligence, playbooks and SOPs, SOC metrics such as KPIs and SLAs, SOC management, HR and training, and IT architecture, based on the author's experience as a SOC/CSIRT analyst and manager plus well-known industry papers.
It links out to established references for building a SOC (MITRE's eleven strategies, FIRST, NCSC and Gartner guides), CSIRT-specific material (FIRST's CERT-in-a-box and CSIRT Services Framework), incident-response methodology and playbooks (CISA, Kaspersky), and forensics resources (NIST SP800-86, ForensicsWiki).
It focuses more on SOC detection activity than on CERT/CSIRT incident response, though it covers both.